@mark1russell7/machines 0.3.26 → 0.3.27

package/README.md

@@ -65,7 +65,7 @@ The algebra reads these documents. It gives the closed form of each timer, the f
 | `ISTIO_SIDECAR_OUTBOUND` | `istio-sidecar-outbound` | The client sidecar of Istio 1.31.3: Envoy 1.39.4 between the app and the mesh, its retries, an update of LDS and the SIGKILL | proxy | 31 implemented |
 | `ISTIO_SIDECAR_INBOUND` | `istio-sidecar-inbound` | The server sidecar of Istio 1.31.3: Envoy 1.39.4 between the mesh and the app, the policy, an update of LDS and the SIGKILL | proxy | 31 implemented |
 | `PILOT_AGENT` | `pilot-agent` | pilot-agent of Istio 1.31.3: the drain and the SIGKILL of the Envoy of a sidecar at the stop of its pod | proxy | 12 implemented |
-| `ZTUNNEL_HBONE` | `ztunnel-hbone` | ztunnel 1.31.3 in in-pod mode: one HBONE connection from a client pod to a server pod, its PING, its drain and the close of each flow of the app | proxy | 14 implemented, 3 derived |
+| `ZTUNNEL_HBONE` | `ztunnel-hbone` | ztunnel 1.31.3 in in-pod mode: one HBONE connection from a client pod to a server pod, its PING, its drain and the close of each flow of the app | proxy | 15 implemented, 3 derived |
 
 Thirty-three documents operate on Linux TCP (`over`). Eight documents operate on no other document. They are Linux TCP, conntrack, the Sentinel, the replication of mongod, aten, the member of Ra, the `RetryAgent` of undici and pilot-agent.
 
@@ -115,6 +115,13 @@ A change to the version of a system changes its sources too. Each fact of the do
 
 In this repository, a snapshot of the predictions of the cells (`packages/cells/src/__snapshots__/predictions.json`) shows each prediction that a change to a document moves.
 
+### 0.3.27
+
+- **The SIGKILL at the end of the grace** (`ztunnel-hbone`). The document has the grace of the ztunnel pod as a knob (`grace`, 30 s from the chart) and a timer from SIGTERM.
+  - The drain ends at the first of the deadline and the grace. The transition `zt.deadline` has the guard `deadline < grace`, and the new transition `zt.killed` has the guard `grace <= deadline`.
+  - At the SIGKILL, the kernel closes each socket of ztunnel: a FIN, or a reset when bytes are unread. The source is the kubelet and the CRI of Kubernetes v1.37.0.
+  - The cells T15.border-off.85 and .86 read both timers. A new knob and a new timer are a feature, thus the version is a PATCH before 1.0.0.
+
 ### 0.3.26
 
 - **ztunnel 1.31.3 for T15** (`ztunnel-hbone`). This new document is one HBONE connection of the ambient mesh, from the source at its tag.

package/build/index.d.ts

@@ -523,7 +523,8 @@ export declare const DOCKER_PROXY_LINK: Machine;
  *
  * At the end of a stream or of its connection, ztunnel shuts down the socket of the app. The app then
  * gets a FIN. No timer closes an idle connection or an old one. At SIGTERM, ztunnel sends GOAWAY, and
- * it ends what is left at its deadline of 25 s.
+ * it ends what is left at its deadline of 25 s. A deadline longer than the grace of 30 s does not
+ * come. The kubelet sends SIGKILL to ztunnel at the end of the grace, and the kernel closes each socket.
  */
 export declare const ZTUNNEL_HBONE: Machine;
 //#endregion

package/build/index.js

@@ -15154,7 +15154,8 @@ const I = "istio 1.31.3";
 *
 * At the end of a stream or of its connection, ztunnel shuts down the socket of the app. The app then
 * gets a FIN. No timer closes an idle connection or an old one. At SIGTERM, ztunnel sends GOAWAY, and
-* it ends what is left at its deadline of 25 s.
+* it ends what is left at its deadline of 25 s. A deadline longer than the grace of 30 s does not
+* come. The kubelet sends SIGKILL to ztunnel at the end of the grace, and the kernel closes each socket.
 */
 const ZTUNNEL_HBONE = machineSchema.parse({
 	format: "mark1russell7.machine/1",
@@ -15229,6 +15230,10 @@ const ZTUNNEL_HBONE = machineSchema.parse({
 			ref: `${Z} src/proxy/h2/server.rs:170-172 and src/proxy/outbound.rs:121 at SIGTERM the accept loops stop, and the HBONE server sends GOAWAY`,
 			rung: "implemented"
 		},
+		{
+			ref: `${I} manifests/charts/ztunnel/values.yaml:102 and templates/daemonset.yaml:215 the grace of the ztunnel pod is 30 s. kubernetes v1.37.0 pkg/kubelet/kuberuntime/kuberuntime_container.go:864-915, :1424-1427 the kubelet stops the container with that grace, and staging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.proto:69-72 the runtime kills it at the end of the grace`,
+			rung: "implemented"
+		},
 		{
 			ref: `${Z} src/proxy/connection_manager.rs:133, :364-376 and src/proxy/inbound.rs:273-280 a CONNECT that a policy denies gets 401. At a change of a policy, ztunnel checks each open inbound connection again and closes each one that it now denies`,
 			rung: "implemented"
@@ -15313,6 +15318,10 @@ const ZTUNNEL_HBONE = machineSchema.parse({
 			kind: "timer",
 			note: "The deadline of the drain after SIGTERM"
 		},
+		"timer.grace": {
+			kind: "timer",
+			note: "The end of the grace of the pod after SIGTERM: the kubelet kills ztunnel"
+		},
 		"tx.ping": {
 			kind: "tx",
 			note: "A PING of HTTP/2"
@@ -15370,6 +15379,13 @@ const ZTUNNEL_HBONE = machineSchema.parse({
 			default: 25,
 			note: "config.rs:810-827: unset, thus the grace of 30 s of the chart less 5 s"
 		},
+		grace: {
+			key: "terminationGracePeriodSeconds",
+			scope: "pod",
+			unit: "s",
+			default: 30,
+			note: "values.yaml:102 of the chart of ztunnel"
+		},
 		keepidle: {
 			key: "the TCP keepalive idle of ztunnel",
 			scope: "process",
@@ -15472,6 +15488,19 @@ const ZTUNNEL_HBONE = machineSchema.parse({
 			arms: ["app.stop"],
 			fires: "timer.deadline",
 			note: "app.rs:391-399: from SIGTERM"
+		},
+		grace: {
+			duration: {
+				knob: "grace",
+				unit: "s"
+			},
+			lateness: {
+				knob: "slack",
+				unit: "s"
+			},
+			arms: ["app.stop"],
+			fires: "timer.grace",
+			note: "kuberuntime_container.go:864-915 and api.proto:69-72: the grace of the pod from SIGTERM, then the kill"
 		}
 	},
 	realizes: {
@@ -15602,10 +15631,22 @@ const ZTUNNEL_HBONE = machineSchema.parse({
 			to: "ended",
 			on: "timer.deadline",
 			timer: "deadline",
+			guard: "deadline < grace",
 			emits: ["tx.close", "tx.app-fin"],
 			note: "ztunnel ends what is left itself, before the SIGKILL of the kubelet",
 			source: "app.rs:391-399, pool.rs:345-347"
 		},
+		{
+			id: "zt.killed",
+			from: "draining",
+			to: "ended",
+			on: "timer.grace",
+			timer: "grace",
+			guard: "grace <= deadline",
+			emits: ["tx.app-fin"],
+			note: "The kubelet kills ztunnel at the end of the grace, before its deadline. The kernel closes each socket: a FIN, or a reset when bytes are unread",
+			source: "kuberuntime_container.go:864-915, api.proto:69-72, tcp.c:2781-2807"
+		},
 		{
 			id: "zt.del-workload",
 			from: [